Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/48c97e5f-21b6-3f7b-9529-24044f727a55.roa
File:                     48c97e5f-21b6-3f7b-9529-24044f727a55.roa (raw, json)
Hash identifier:          h0v7p4vn32LCegRp6b7aKnw2cNknN1f9xZ3aZ7+vVcw=
Subject key identifier:   EE:29:B8:24:EA:3E:73:6D:09:FB:D5:89:9F:A2:A7:17:B1:23:FD:FB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583FCBD8B72FDC6CE67FE2A3AD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/48c97e5f-21b6-3f7b-9529-24044f727a55.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Thu 04 May 2023 04:00:00 +0000
asID:                     398922
IP address blocks:        2001:470:158::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:d8:b7:2f:dc:6c:e6:7f:e2:a3:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2023 GMT
        Subject: CN=467430a6-a951-4bcb-9d09-389ddf8d24f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:12:76:c7:56:db:25:53:96:2e:30:3b:f8:
                    d0:02:0a:65:d4:53:85:c7:23:1e:cc:24:ee:1b:b1:
                    32:2a:89:d2:93:5f:c8:5f:a5:17:97:8a:fa:90:2c:
                    fa:51:11:0f:d2:83:11:a1:72:d7:6c:c7:bf:e2:fd:
                    69:06:8b:63:a9:ea:f5:4f:7d:e5:c6:49:8a:d8:4c:
                    67:3e:57:c9:c1:ec:84:d6:e2:e7:10:89:6f:e0:c0:
                    8d:a0:31:b0:be:f0:bd:cd:35:13:80:c9:c7:b8:ec:
                    01:37:34:27:fc:d1:90:86:45:32:33:a5:71:2a:db:
                    dc:23:b9:05:16:86:15:fb:d9:01:2e:51:ba:db:37:
                    d0:09:99:c9:14:d8:4f:b2:d4:8d:20:c5:c5:8d:5a:
                    6e:09:7d:c2:f7:b3:ac:82:38:02:6c:56:2d:d1:b9:
                    e4:1b:01:e9:63:fa:b1:e8:e4:e7:df:c0:11:a4:1f:
                    1f:75:15:ca:32:56:67:e9:f7:4b:83:b7:e6:6f:86:
                    12:3d:e0:df:46:7a:22:cf:f9:2e:59:d5:7b:b3:39:
                    18:90:cd:f3:01:01:0d:c1:75:0f:2d:d6:a1:40:0e:
                    29:b8:df:28:ac:dd:b7:d3:36:34:36:59:7e:6c:9f:
                    7f:42:aa:35:ff:5c:e4:a0:07:10:fa:30:0d:a5:34:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:B8:24:EA:3E:73:6D:09:FB:D5:89:9F:A2:A7:17:B1:23:FD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/48c97e5f-21b6-3f7b-9529-24044f727a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:158::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:c4:68:d9:ca:35:c2:fd:5b:5b:db:b3:cd:cf:f8:f9:ff:
         36:d9:09:fa:c5:cb:50:78:cc:b7:68:ad:b2:88:d8:ef:ec:33:
         65:58:6d:b2:12:1e:61:58:19:7a:6e:bc:d3:b3:7c:1b:29:7a:
         25:af:f1:f1:b2:75:0f:71:95:a0:c6:b7:65:da:c6:fa:73:07:
         53:6d:1c:d0:44:27:b8:33:0a:ee:9e:f1:e6:79:2a:7a:de:f4:
         ae:a8:e8:e9:b2:23:25:d5:42:60:81:b0:e6:e2:22:ec:f7:e8:
         c5:aa:70:41:4f:97:9b:44:d2:49:3c:13:12:fd:c9:6a:a5:a2:
         55:90:c4:a3:97:4c:bc:e9:57:3a:f7:63:bf:0f:08:28:d4:39:
         0b:3d:de:f8:c7:d4:ce:24:c8:be:c6:fd:cb:ad:a7:f1:91:a0:
         01:17:3d:5a:ad:74:a6:36:b2:e3:91:94:44:35:dc:a3:15:2a:
         9a:d6:ca:e4:78:93:09:90:5e:f0:8a:d8:6d:4c:1d:5f:ad:87:
         98:4e:b4:2b:fd:4e:13:d8:10:c4:21:50:f9:9e:16:94:0e:d9:
         52:d5:4d:5f:db:e8:c7:90:0e:82:df:ab:ce:73:bb:49:a6:bf:
         c7:f7:ce:d7:e8:a0:62:1b:8f:e2:f7:9a:76:d9:8b:71:72:f8:
         ea:4c:2d:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/L2Lcv3Gzmf+KjrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMTEwMzEyMDAwMFoXDTIzMDUwNDA0MDAwMFowLzEtMCsGA1UEAxMk
NDY3NDMwYTYtYTk1MS00YmNiLTlkMDktMzg5ZGRmOGQyNGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/4SdsdW2yVTli4wO/jQAgpl1FOFxyMezCTu
G7EyKonSk1/IX6UXl4r6kCz6UREP0oMRoXLXbMe/4v1pBotjqer1T33lxkmK2Exn
PlfJweyE1uLnEIlv4MCNoDGwvvC9zTUTgMnHuOwBNzQn/NGQhkUyM6VxKtvcI7kF
FoYV+9kBLlG62zfQCZnJFNhPstSNIMXFjVpuCX3C97OsgjgCbFYt0bnkGwHpY/qx
6OTn38ARpB8fdRXKMlZn6fdLg7fmb4YSPeDfRnoiz/kuWdV7szkYkM3zAQENwXUP
LdahQA4puN8orN230zY0Nll+bJ9/Qqo1/1zkoAcQ+jANpTQtDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO4puCTqPnNtCfvViZ+ipxexI/37MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDhjOTdlNWYtMjFiNi0z
ZjdiLTk1MjktMjQwNDRmNzI3YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAATcxGjZyjXC/Vtb27PNz/j5/zbZCfrFy1B4zLdorbKI2O/sM2VY
bbISHmFYGXpuvNOzfBspeiWv8fGydQ9xlaDGt2XaxvpzB1NtHNBEJ7gzCu6e8eZ5
Knre9K6o6OmyIyXVQmCBsObiIuz36MWqcEFPl5tE0kk8ExL9yWqlolWQxKOXTLzp
Vzr3Y78PCCjUOQs93vjH1M4kyL7G/cutp/GRoAEXPVqtdKY2suORlEQ13KMVKprW
yuR4kwmQXvCK2G1MHV+th5hOtCv9ThPYEMQhUPmeFpQO2VLVTV/b6MeQDoLfq85z
u0mmv8f3ztfooGIbj+L3mnbZi3Fy+OpMLbY=
-----END CERTIFICATE-----